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A safety system for aircraft 



Description 
Technical field 

This invention relates to a safety system for aircraft. 

The object of the present invention is to prevent improper use of aircraft, due a crash on to a 
target caused by violence, for example. 

Description of the invention 

This obj ect is achieved by a safety system for aircraft, wherein prohibited airspaces which 
aircraft may not enter are marked on a digitally stored image of the airspace, wherein the 
aircraft is provided with an automatic control device, and wherein on approaching a 
prohibited airspace the control device automatically steers the aircraft on to an alternative 
route which is situated outside the prohibited airspace. 

With the safety system according to the invention, an aircraft can be prevented from entering 
the airspace above regions which are particularly at risk - hereinafter also termed prohibited 
regions. For example, these prohibited regions can be cities, nuclear power stations, or 
individual buildings or industrial installations which are particularly at risk. 



With the system according to the invention, provision can be made for the height of the 
prohibited airspace to be greater than the height which can be reached by the aircraft. 
However, it is also possible to set the height of the prohibited airspace lower, so that aircraft 
can fly over the prohibited airspace at a greater height, but if they ^proach the prohibited 
airspace from above or from the side they are steered on to an alternative route. 

The safety system according to the invention can be activated permanently. In order to 
prevent unwanted automatic control if there is an unintentional, possibly only marginal or 
permissible, entry into the prohibited airspace, provision can be made according to a further 
embodiment of the system according to the invention for the automatic control only to be 
activated after the input of a command or after of the activation of an input device, and for it 
only to be possible to deactivate the automatic control in a secure manner. 

The means for inputting tiie command should advantageously be designed so that the 
command can still be input by the crew in the event of a threat by hijackers. Deactivation can 
be protected by the input of a code word, for example. If this does not appear secure enough, 
and if forced deactivation can possibly be effected by attackers, provision is made in one 
form of this embodiment for it only to be possible to deactivate the automatic control by a 
device situated outside the aircraft, or for deactivation only to be possible when the aircraft is 
on the ground. The latter can be determined by the inwardly springmg wheel suspension, for 
example. 

In another embodiment of the safety system according to the invention, the automatic control 
includes an automatic landing. In this connection, the location of the automatic landing can 
preferably be predetermined by a device situated outside the aircraft. According to another 
embodiment, control on the alternative route can be taken over by a device situated outside 
the aircraft, so as to be able to control the further movements of the aircraft even before 
landing without having to rely on a sequence of automatic operations. 

hi a fiuther advantageous embodiment of the safety system according to the invention, when 
the automatic control is activated a message is sent to a device for air traffic control. Air 
traffic control devices are thereby rendered capable of taking measures for safeguarding the 



airspace in which the aircraft which is being steered automatically on to an alternative route 
is situated, such as warning or diverting other aircraft, for example. 

To prevent the aircraft from being endangered by other moveable objects (aircraft) when it is 
automatically steered on to the alternative route, provision can be made for automatic control 
also to be effected if an approach to moveable objects occurs. 

According to another embodiment, the aircraft is also automatically steered on to an 
alternative route if it approaches other objects, particularly other aircraft. For this purpose, 
information on the positions and optionally on the directions of movement and speeds of 
movement of the aircraft is transmitted between the aircraft via suitable data channels or 
radio links. 

A method of identifying a risk of coUision during air travel is described in EP 0 886 847 Bl 
and in US 6,201,482 Bl. Advantageously, this method is suitable for the safety system 
according to the invention, for which, in detail, the following is provided: 

the airspace is divided into predetermined volume elements, 

for the aircraft, probabilities are calculated with which the aircraft will be situated in 

predetermined volume elements at a plurality of selected points in time (residence 

probabilities), 

the probabilities of the residence of the particular aircraft in each volume element 
(collision probabilities) are calculated for the predetermined volume elements and for 
the selected points in time from the residence probabilities of the particular aircraft 
and from the residence probabilities, which are set to one, of the volume elements of 
the prohibited airspace, and 

an alternative route is calculated if the collision probability exceeds a predetermmed 
value for at least one volume element. 

In this embodiment of the safety system according to the invention, it is advantageously 
possible to calculate alternative routes. Moreover, alternative routes can be calculated in 
good time before the prohibited airspace is entered, hi this embodiment, for the automatic 
selection of alternative routes which are as advantageous as possible, a plurality of 



alternative routes with a deviation which increases from alternative route to alternative route 
is calculated, as a test, according to recognised or established alternative rules, and the 
calculated alternative route which, at the smaUest deviation, results in a probability of entry 
into the prohibited airspace which is less than a predetermined threshold value, is selected 
and is converted into a control command. 

In order to arrive at an alternative route in a direction which is as favourable as possible, the 
following provision can be made: when a limiting deviation is reached without the 
probability of entry into the prohibited airspace being correspondingly reduced, alternative 
routes in another direction can be calculated. Finally, endangerments due to the use of the 
alternative route can be avoided in this embodiment by additionally taking into consideration 
residence probabilities of other objects for the calculation of the alternative route. 

When the aircraft approaches the prohibited airspace, and in the presence of other objects, 
the question of a priority arises for the calculation of the altemative route. In order to solve 
this problem, this embodiment makes provision for the residence probabilities for volume 
elements which, are situated in an edge region around the prohibited airspace to be set to a 
lesser value than that of the prohibited airspace. The probabiUty values can range between 
0.2 and 1, for example. 

In one advantageous embodiment of the safety system according to the invention, a warning 
signal for the pilot is emitted if the aircraft approaches a prohibited airspace. This warning 
signal can be emitted optically and/or acoustically. Moreover, provision can be made for a 
warning signal for the pilot to be emitted if the safety system takes over the automatic control 
of the aircraft. 

In another advantageous embodiment, provision is made for prohibited airspaces to be 
displayed a on a screen, preferably on a navigation display, and for the alternative routes to 
be displayed which are calculated if necessary. 



In order sufficiently to inform devices for air traffic control or other responsible locations 
and authorities, provision can be made with the safety system according to the invention for 



the position of the aircraft, the airspace, and the alternative route which exists if necessary, to 
be displayed on a display device. 



Brief description of the drawings 

Examples of embodiments of the mvention are explained in more detail in the description 
given below with reference to the drawings, which comprise a pluraUty of Figures, where: 

Figures 1 to 4 are different cartographic representations, each comprising a prohibited 
airspace; 

Figure 5 is a block circuit diagram of a safety system according to the invention; 

Figure 6 is a view from above showing an example of the coverage of volume 
elements by residence probabilities; and 

Figure? is a side view ofthe subject of Figure 6. 
Ways of carrying out the invention 

Figure 1 shows a portion, which is not illustrated in detail, of a map with airports 1, 2, 3 and 
an object 5 to be protected. A prohibited airspace 6 is situated around the object 5 to be 
protected. In the embodiment exempUfied in Figure 1, this prohibited airspace has a circular 
cross-section and a height which is sufficient to prevent it being flown over by the aircraft in 
question or to prevent it from being flown over at an altitude which is too low. 

Whereas in the example shown in Figure 1 aircraft are prevented from approaching the 
object 5 to be protected at less than the radius of the prohibited airspace 6, in the 
embodiment shown in Figure 2 any deviation of air routes 7 towards the object 5 to be 



protected is prevented. For this purpose, the prohibited airspace 6' occupies practicaUy the 
entire area between the air routes 7. 

In the examples of embodiments shown in Figures 3 and 4, the airspace is partitioned into 
volume elements 10, for which values of a residence probabiUty of objects with which an 
aircraft can collide are stored in a databank. If an object is actually situated within a volume 
element, the probabiUty is 1. For objects in motion, the probabiUty is calculated of their 
being situated in the corresponding volume elements at predetennined times. Details of this 
procedure are given in the aforementioned patents. 
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In the examples of embodiments of the safety system according to the invention which i 
illustrated in Figures 3 and 4, volume elements which an aircraft should not enter are covered 
by a high probability, preferably 1. Moreover, enforced steering on to an altemative route is 
provided for. The particular residence probabiUties for the volume elements which can be 
reached by the aircraft within the predetermined times are calculated for the "particular" 
aircraft in each case. If there is a volume element for which the probabiUty that both the 
particular aircraft and the other object are situated there exceeds a predetermined threshold 
value, an altemative route is taken. In the safety system according to the invention, an object 
situated in the prohibited airspace 6" is simulated by specifying a high probabiUty there. 

In the example of an embodiment which is illustrated m Figure 4, the prohibited airspace 6" 
has an edge 1 1 which is shown less densely hatched in Figure 4. The volume elements of this 
edge are covered by a lower residence probability, so that if there are problems in the 
determination of a risk-free altemative route - on accomit of other aircraft, for example - the 
edge region 1 1 can stiU be flown through. 

The device illustrated in Figure 5 consists of a plurality of units, the function of which as 
such is known in principle and which are therefore not described in detail. A navigation unit 
21 is provided with two antemias 22, 23 and receives signals from a GNS system, such 
global positioning system, for example. Antenna 22 is designed for receiving satellite 
signals, whilst differential signals for increasing the accuracy of determining the position 
be received via antenna 23. The navigation unit 21 also contains other devices which 
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necessary for navigation, for example a compass and an altimeter. From the data and signals 
received from the compass and the altimeter, the navigation unit calculates the position and 
location of the aircraft, as well as changes in these data, particularly in the flying speed, the 
speed of change of course and the speed of ascent/descent. 

These data are fed to a main computer 24 which is connected yia a bidirectional data link to a 
transponder 25. The latter is a transmitter/receiver unit comprising one or more antennas 26 
for the exchange of data with other aircraft, ground stations and vehicles. Data transmission 
systems of this type are known in the art and do not need to be explained in more detail in 
connection with the present invention. A system which is suitable for the method according 
to the invention is described in the conference proceedings of The International Air 
Transport Association, Global Navcom '94, Geneva, 18 to 21 July 1994, by J. Nilsson, 
Swedavia: 'The Worldwide GNSS-Time Synchronized Self-Organising TDMA Data Unk - 
A Key to the Implementation of Cost-Effective GNSS-Based CNS/ATM Systems". 

A traffic colUsion avoidance system (TCAS E) can also be used for determining the relative 
position of another aircraft. 



If advisable in the particular case, the data produced by the navigation unit 21 can also be 
transmitted directly to the transponder 25 insofar as they are provided for transmission to 
other aircraft. 

The device illustrated also comprises a databank 27 in which, amongst other data, 
cartographic data on the terrain are stored, for example the prohibited airspaces illustrated in 
Figures 3 and 4. Since the calculation of the residence probabihty of other aircraft can be 
made to be dependent on the type of the corresponding other aircraft, data which relate to 
relevant aircraft and which are necessary for this purpose can also be stored in the databank 
27. Data such as these essentially describe the capacity for movement of the aircraft, such as 
the maximum acceleration and the tightest curve radii; The data stored in the databank 27 
can be called up by the main computer 24 according to the respective need. Insofar as the 
data are directly provided for graphic representation by means of the display 30, they can 
also be fed directly to a symbol generator 28. 
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In addition, the main computer 24 is connected to other computers of the avionics system 29 
of the aircraft, so as to be able to call up the data necessary for calculating residence 
probabiUties and alternative routes, and in order to convert them into the control commands 
which are necessary for automatically flying on alternative routes. Furthermore, an audio 
system is connected to the main computer 24 for the purpose of speech output. 

The devices described above, as well as a transmitter/receiver 32 with an antenna 33, are 
situated in the aircraft. The transmitter/receiver 32 forms a radio link to a ground station, 
which also comprises an antenna 34 and a transmitter/receiver 35. The latter is connected to 
a computer 36 of a monitoring device, of air trafBc control for example. As soon as the 
probability of entering the prohibited airspace is identified and an alternative route is 
calculated by the system according to the invention, this situation is reported to the ground 
station, whereupon all the flight data necessary for assessing the position are made visible on 
the screen of the computer 36. Suitable measures can then be iptroduced by the safety 
personnel, for example the steering of the aircraft to the next suitable landing strip or 
instructions to other aircraft to move out of or avoid the airspace concerned. 

Figures 6 and 7 each show part of the. air space - Figure 6 as a plan view and Figure 7 as a 
side view. An aircraft 41 enters the airspace. Inside the airspace there is an object 42 to be 
protected, with a prohibited airspace, which is represented by closer hatching, and an edge 
region 44. The prohibited airspace 43 and the edge region 44 extend to a height which can be 
reached by the aircraft in question. A further aircraft 45 enters the airspace from the opposite 
direction. Probabilities with which the aircraft 45 is resident in volume elements 46 at the 
time considered are also emphasised by hatching, the density of which is higher the higher is 
the probabiUty. In order to provide a view of the volume elements 46 in Figure 7, the 
hatching of the prohibited airspace 43 and of the edge region 44 has been correspondingly 
discontinued. For the sake of clarity, the residence probabilities of the aircraft 41 are not 
illustrated. 

There now follows an explanation of the determination of an alternative route, wherein in a 
preceding step the risk of a "collision" with the prohibited airspace has been identified by the 



collision probabiUty for one or more volume elements exceeding a permissible value if 
aircraft 41 flies on route 47 and there is thus a high probability of aircraft 41 entering the 
prohibited airspace 43, or at least entering the edge region 44, 



As a test, alternative routes 48, 49 are calculated according to general alternative rules, with 
the result that route 48 does not prevent entry into the prohibited airspace, and route 49 
necessitates a turning speed which is too high and is therefore not used. A route 50 is then 
calculated, which at constant altitude, however, signifies a risk of coUision with the other 
aircraft 45. In order to avoid this in the example illustrated, the flying altitude is reduced 
(Figure 7) in addition to a change of course, so that aircraft 41 can avoid the prohibited 
airspace 43, without a hazardous approach to aircraft 45. . 



